Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBK4ANhU6Z4jWXf0O4d63AR0Ixc.roa
File: WBK4ANhU6Z4jWXf0O4d63AR0Ixc.roa (raw, json)
Hash identifier: ksex0CjnclkikDdslsVceQYlItF5MHYJmBUdtA5dmwI=
Subject key identifier: 58:12:B8:00:D8:54:E9:9E:23:59:77:F4:3B:87:7A:DC:04:74:23:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018513536F7E0F08F780C4934ADE736A97A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBK4ANhU6Z4jWXf0O4d63AR0Ixc.roa
Signing time: Thu 15 Dec 2022 01:08:33 +0000
ROA not before: Thu 15 Dec 2022 01:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:53:6f:7e:0f:08:f7:80:c4:93:4a:de:73:6a:97:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 01:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5812b800d854e99e235977f43b877adc04742317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:67:48:cc:9b:88:34:74:21:08:6c:dd:22:
5e:37:c4:2e:38:6e:b3:ad:31:7d:be:a5:d8:e6:34:
8a:58:35:e0:3c:54:44:79:34:f3:6a:76:14:1a:f6:
8c:e8:c1:ff:81:b0:11:b8:25:89:00:58:56:8a:58:
3b:cc:10:59:6c:27:04:57:2b:ff:55:28:8d:c5:24:
7e:e6:dc:86:f1:33:4f:45:e5:68:2b:95:5d:48:c9:
e5:76:19:60:cf:ad:e1:e2:64:de:ad:95:b5:bf:61:
df:ca:c5:b4:79:f5:f0:b5:92:02:7a:58:ff:df:63:
5c:3a:1f:25:3d:f0:99:96:5c:ad:aa:80:6f:78:01:
8b:90:78:e7:4e:66:8c:2c:a2:82:6d:33:fd:c1:4f:
82:e6:73:a9:92:5f:f8:07:ee:9c:21:28:98:32:dd:
3f:01:cf:10:11:b9:87:9e:65:b1:1b:bb:8f:db:e8:
f9:94:63:e4:8f:64:15:9b:b5:f9:7a:2a:78:e1:23:
d5:e8:5a:13:3c:40:1d:36:62:06:0f:ac:17:a4:dc:
71:9c:1f:23:fa:a9:2a:46:1a:ee:22:69:8b:8f:9e:
18:93:d3:16:77:d0:e7:ac:ca:67:55:d5:31:bf:97:
a0:77:ac:41:10:91:3c:45:fb:3f:2f:01:4d:2e:9f:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:B8:00:D8:54:E9:9E:23:59:77:F4:3B:87:7A:DC:04:74:23:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WBK4ANhU6Z4jWXf0O4d63AR0Ixc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:c7:1a:15:24:27:96:2c:63:53:27:1d:d1:f5:68:56:ca:d6:
aa:dc:f9:78:74:95:34:1c:06:29:8f:93:b1:69:09:24:90:77:
e4:bd:b1:f7:ba:c7:bd:20:42:03:60:bd:ad:c8:be:a6:c8:41:
30:4a:ad:39:0e:52:41:92:3d:3d:5f:e0:5d:6e:ed:d2:89:48:
4f:c6:3b:9b:78:fa:3e:4e:df:07:35:f8:87:78:6b:79:29:af:
47:12:9e:2e:c1:b0:68:b6:10:0e:ee:cc:14:ea:da:6c:8f:05:
21:48:bf:3e:e5:06:9c:9f:3a:33:fe:d2:3e:6c:33:42:20:fe:
07:fe:0f:0f:a5:72:b0:ee:16:9d:22:19:ba:9f:52:61:7f:dd:
84:cb:06:ba:4e:e5:7e:18:d6:d7:ac:a1:fa:be:e4:ca:eb:73:
78:3b:f8:ee:6c:74:a8:a9:c6:80:c5:3d:a8:68:9f:2b:cc:c4:
34:c7:bb:cd:d4:19:3b:92:b0:d9:86:01:4c:35:7b:e8:2a:80:
d0:47:f6:bd:e2:a1:4e:a3:6c:56:f0:69:34:c8:4a:4b:e1:81:
a0:2a:fe:37:c8:5f:e7:60:e2:56:9e:29:4e:bf:07:88:2e:0c:
9c:cd:b3:6b:12:6f:7b:66:a9:87:cb:d4:67:e4:e2:c9:66:7e:
88:10:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:36:11 2025 by rpki-client